CN1200820A

CN1200820A - Operating apparatus with payment for usage

Info

Publication number: CN1200820A
Application number: CN96197893A
Authority: CN
Inventors: 安冬尼·安德鲁·里德
Original assignee: British Telecommunications PLC
Current assignee: British Telecommunications PLC
Priority date: 1995-10-10
Filing date: 1996-10-10
Publication date: 1998-12-02
Also published as: KR19990064232A; CN1199472A; KR19990064145A; NO981641D0; JP2000500889A; AU7223996A; NO981639D0; CA2233873A1; NO981639L; AU700316B2; EP0855054B1; EP0855054A1; WO1997014086A1; DE69602965T2; WO1997014085A1; JPH11514514A; NO981641L; CA2233288A1; DE69602965D1; AU7223696A

Abstract

A method of operating apparatus for value, the apparatus being connected to a telecommunications channel, comprising the steps of: transmitting a forward message from a monitor device comprising a communications device and a programmable processor oeprating under the control of a stored program to a remote location via said telecommunications channel; receiving a corresponding return message from said remote location via said telecommunications channel; verifying said return message to determine whether it is authentic; and, if so permitting the operation of said apparatus; and, if not, inhibiting the operation of said apparatus, the program being arranged to monitor the operation of the apparatus and to perform the above steps whenever the apparatus is in use.

Description

Have the operating means of repaying use

The present invention relates to the method and apparatus of paid (for example renting) operating means.

Traditionally, when renting such as device such as TV or stereo equipment, expense is to collect according to the period that the user occupies this device.This may it doesn't matter with user's actual use, thereby the user of slight use is their expense of use payment phase counterweight possibly for the user of a large amount of uses.

On the one hand, the invention provides the method and apparatus of the expense of collecting this device.Mainly be to provide this machine monitoring equipment, do not have it just can not operate this device with this device.Watch-dog is that to be connected remote authorization by telecommunications network supercentral, and exchanges the ongoing use of secret signal with the device that allows to rent with this remote authorization center.When operative installations, just transmit this signal, so these signals can be used as the basis of the expense of the actual use of collecting this device.

Therefore, just can carry out computer hardware even be connected the method more flexibly of the use charge of the peripherals on the computer hardware such as printer etc.

Identical principle can expand to the device of other type in the residence that remains on telecommunication user, as long as these devices comprise the programmable device (microcontroller that for example has the unalterable program of the control washing machine that remains in the ROM (read-only memory)) that has program stored.

Identical principle also can be applied on the telemetry, and in check in this case device will be the meter apparatus of electricity, coal gas, water and so on.

Others of the present invention and preferred embodiment will be conspicuous from following description and claim.

Embodiment of the present invention will be described in more detail by way of example just with reference to the accompanying drawings, in the accompanying drawing:

Fig. 1 is the block scheme of displaying according to the parts of the system of the paid operation programmable device of the first embodiment of the present invention;

Fig. 2 a shows the block diagram of the method for download control program in the embodiment in figure 1;

Fig. 2 b is the process flow diagram of operation of device of programming of the embodiment of exploded view 1;

Fig. 2 c is the process flow diagram of the operation at the station that accounts among the embodiment of exploded view 1;

Fig. 3 is that further displaying is according to the process flow diagram of the operation of the device of the programming in the example of the embodiment of Fig. 1;

Fig. 4 is the block scheme of displaying according to the parts of the system of the paid operation programmable device of the second embodiment of the present invention;

Fig. 5 is the process flow diagram according to the operation of Fig. 2 b in modification first example of second embodiment and 3;

Fig. 6 is the block scheme of displaying according to the parts of the system of the paid operation programmable device of the third embodiment of the present invention;

Fig. 7 is the account block scheme of parts of equipment of this machine among the embodiment of exploded view 6;

Fig. 8 is corresponding to Fig. 6 and is the block scheme of displaying according to the parts of the system of the paid operation programmable device of the fourth embodiment of the present invention;

Fig. 9 is corresponding to Fig. 7 and be the account block scheme of parts of equipment of this machine among the 4th embodiment of Fig. 6;

Figure 10 is for showing the signal transmission diagram of the signal transmission among the 4th embodiment;

Figure 11 a and 11b are the process flow diagram of displaying according to the operation of the equipment of Fig. 9 of the 4th embodiment;

Figure 11 c is the process flow diagram of the operation of the remote supervisory station of displaying the 4th embodiment;

Figure 12 is the process flow diagram according to the operation of modification first instance graph 5 of the fifth embodiment of the present invention;

Figure 13 is the process flow diagram according to the operation of modification second instance graph 5 of the fifth embodiment of the present invention; And

Figure 14 is the block scheme of displaying according to the parts of the system of the device of the paid operation programming of the sixth embodiment of the present invention.

First embodiment

Referring to Fig. 1, in first embodiment, the invention provides at programmable processor device (such as personal computer or other workstation) and go up the secret and mechanism that accounts that uses application program (such as word processor).In the present embodiment, pay imformation is to collect by being used in the one or more central charge station of collecting in the telephone charge information usually.Present embodiment is special to be concerned about using the charge of the program of downloading by telecommunication link.

Referring to Fig. 1, comprise device 100 according to the system of present embodiment, its use will be charged; Communication link 10 will install 100 and be linked on the telecommunications network 20 and (comprise one or more switching nodes, can insert many other telecommunication links by them); Program is downloaded the source station 30 (for example being coupling in large-scale principal computer on the network 20 by telecommunication link 31) and station 200 (are depicted as by telecommunication signal link 21 and are coupling on the network 20) that account here.

In more detail, device 100 comprises and is coupling on the telecommunication link 10 and comprises modulator-demodular unit and the communication interface 110 of coherent signal parts; The processor 120 that can under program stored control, operate; And the storer that is used for the control program of storage of processor 120.Traditionally easily, the storer in the present embodiment can comprise the ROM (read-only memory) 130 of storage operating system core (as machine BIOS); The random access memory 140 that is used for the control program of storage activities; And permanent memory 150 hard disk drives that are used to store current inactive program and between device 100 turnoff times, keep procedure stores).

Download center 30 comprises the communication interface 32 that is used to be connected on the telecommunication link 31 in more detail; Be used to store the storer 34 of the program that will download; And the processor controls 36 that is used for the operation of control station 30.

The general details of station 200 the structure that accounts can be in phase profit " Britain Telecom's engineering ", and the monograph that accounts is rolled up 11 the 4th parts, looks in January, 1993 number and seeing.For understanding the parts of wanting required for the present invention is to be used for receiving and the interface circuit 210 that sends signal data by telecommunication channel 21; Processor controls 220 (can provide) by large-scale analytic accounting account computing machine; The code memory 240 of memory encoding and check data; And the storer 240 that accounts (being to provide by the large-scale analytic accounting account storer that is used to write down the telephone charges information of using network 20 easily in the present embodiment) that wherein stores pay imformation.

Illustrate in greater detail the operation of present embodiment below with reference to Fig. 2 and 3.Download

Fig. 2 a shows the process of carrying out according to present embodiment when downloading.At the beginning, will install 100 under the control of operating system program of storage is connected on the download center 30 by network 20 and (for example passes through the internet).When receiving instruction by input equipment 170, processor 120 makes communication interface 110 transmission requests download the signal of the procedural item of sign.

In step 1002, the request signal that download center receiving trap 100 sends.In step 1004, generate unique marker symbol (for example comprising the tediously long binary sequence that generates by pseudorandom number generator) and identify this downloaded copy of program uniquely, and from storer 34, read this program and revise the copy that does not insert marker symbol to set up.In step 1006, unique marker symbol is sent to the station 200 that accounts together with identification request person's telephone number (or other identification data) by network 20.In step 1008, send program (comprising unique marker symbol) to device 100 with serial mode by network 20 and

link

31 and 10, the latter receives it by communication interface and it is stored in the permanent memory 150.Confirm

In the present embodiment, this program comprises the code of the process that is used for the affirmation process that each this program of use is provided shown in the execution graph 2b.In step 1102, when this program of activation, in the function (step 1106) of normally carrying out this program before, in step 1104, call the affirmation routine earlier.In confirming routine,, will use request signal to send network 20 in step 1202.This use request signal has makes network 20 that it is directed to the form at the station 200 that accounts.For example, when link 10 is when comprising ISDN (ISDN (Integrated Service Digital Network)) link of 2 " B " (64 kilobits/per second) data channel and one " D " (16 kilobits/per second) signaling channel, this use request signal comprises a packet, and this packet comprises header portion (indicating this is the use request package that will be directed to the station 200 that accounts); And data division (body of the application program that indication will be used).

Though this is not essential, in the present embodiment for added security, data division preferably should be encrypted.In order to guarantee ciphered data part, can comprise additional in the data division before encrypting such as time dependent data such as dates with later on different from the use request signal of same device.

In step 1204, whether judge from telecommunication link 10 and receive answers (for example the bag of receiving at the D of isdn link 10 channel, it is the message that returns that its header portion identifies it).When not answering, do not carry out the further execution of program.Passed through (for example several minutes the order of magnitude) after the preset time, it may be suitable providing from the outlet of this program.

When receiving answer, in step 1206 by on the data division of returned packet, carrying out predetermined decipherment algorithm with its deciphering, and in step 1208, the unique code of result and storage is compared.If both correspondences, processor returns executive utility in step 1106 in step 1210.If both are not corresponding, then in step 1212, stop all further execution of application program.

After the invalid answer that receives pre-determined number, provide application configuration become to wipe or to rewrite it to be stored in the part of the copy on the permanent memory 150 or itself can not be operated, and to point out to have taken place this incident at output device 160 be suitable.Account

Referring to Fig. 2 C, be described in more detail below the operation at the station 200 that accounts in the present embodiment.

Receive in step 1302 when using request signal (front sends in step 1202), the identity of dispensing device 100 is judged at the station 200 that accounts; In this embodiment, such as transmitting the telecommunication link 10 (adopting traditional calling line identification technology) that uses request signal by judging via it.Also can this information be attached on the header portion that uses request signal by the first node that in network 20, runs into.

In step 1306, processor controls 220 reads code data memory 230 and judges that this identity is whether corresponding to the identity (in front from the basis of the data of download website 30 transmission) of unique code of correspondence that the right of this application program is used in indication that has that is stored in wherein.If in code data memory 230, find corresponding item, generate answer just make processor 220 in step 1308, encrypt this unique code by the crypto process that uses the decryption process deciphering that in device 100, to be carried out.Preferably the returned packet of encrypting is arranged in time each is installed 100 different; This can for example reach by encrypting with unique code such as date equal time variable data.

In step 1310, the return signal of Sheng Chenging is provided with header and makes it determine to be routed on the device 100 by network 20 and transmit return device 100 like this.

If find that in step 1306 identity of device 100 is invalid, just do not generate return signal (also may generate predetermined invalid return signal).

In step 1312, record charge record in the storer 240 that accounts.For example when using the calling line sign, record can be remembered in the telephone number that identifies item under one's name.Indication of the program of in the present embodiment, comprise date and time information in the charge record, being asked (in using request signal, receive or therefrom derive) and the indication of using the unit charge of this program.

Thereby when the user of each device attempted to use the program of download, the foregoing description can be operated.In this trial each time, the identity of inspection user (by confirming its telephone number).If identity is unacceptable, just do not send return signal and this program inoperation.When transmitting return signal, just charge for the use of program at every turn.Account by the time

Outside the charge, also charge when being preferably in the program that each use downloads according to the use period of program.This is by carrying out when having pass by each time preset time interval delta T (for example per 5 minutes) the calling of check routine starting point A of Fig. 2 b to be accomplished as shown in Figure 3.Fig. 3 illustrate the real-time clock (not shown) of property program loop ground reading device 100 and in the past in step 1110, call the time test step 1108 of check routine during preset time.Yet for program, the real-time clock of setting device 100 generates interruption and responds this interruption execution in step 1110 after through preset time Δ T may be more convenient.

Station 200 the operation that accounts is identical basically, removing is not record one sequence difference charge item in succession in the repetition of step 1312 in succession, but in the repetition of step 1312, generate in succession billable events signal in succession, with their accumulations and be recorded as comprise single date and time, and by the number of times of the billable events of such generation and the single charge item of the long-pending charge that constitutes of the predetermined rate of charge of this program of use.

Present embodiment provides some anti-swindle protections.When swindle when making copy and constitute only respond visit from original user's correct telephone wire owing to adopted the calling line recognition technology.Rogue user can not use this copy from any other facility.

Since return signal be configured to time-varying, have the rogue user of the copy of this program just can not be only by being overlapped on the communication link 10 and counterfeit for subsequently of record return signal, signal (because encryption) that also can not prediction is returned on the basis of the signal that record returns previously.

Thereby perhaps might decompiler part, study its function, and defeat this check and the charging mechanism of present embodiment, be bound to prevent unskilled or opportunistic fraudster but do the energy of being spent like this.

Not to change in time to want ciphered data, may change the parameter of crypto process (and corresponding decryption process) yet.In an identical manner, not for each program copy distributes unique code, also may in each program, distribute decipherment algorithm only and distribute corresponding cryptographic algorithm to give the station 200 that accounts.Second embodiment

Second embodiment finishes total aspect and the first embodiment identical functions, and identical step will give identical reference number with parts and no longer describe.For convenience's sake, the some difference with first embodiment are described together here, can both be with the feature of first embodiment (or other embodiment) and use independently of each other but should understand various difference.Particularly, second embodiment is different with first embodiment aspect following:

1. account and on the download center, carry out by downloading entity, rather than carry out on the station that accounts by network operater.

2. the use of program is to charge by the time with reference to use rather than (or additional) of specific function or subroutine.

3. use request message be generate with the progression that increases progressively and returned packet be to use request message to generate by encrypting easily.

4. use and monitored in time.

Thereby referring to Fig. 4, download in the present embodiment comprises download center as described above basically 30 with distributing center 300; Use monitoring memory 310; The equipment that accounts 320 with account record storage 321 and processor 322.Certainly, the station 320 that accounts can be set on the geographic position that separates with download website 30.Yet easily, in fact processor 322 is provided by the control module 36 of download website 30, and signaling interface 32 also plays meter account equipment 320.Confirm and account

In this embodiment, carrying in the device 100 use request signals that generated makes them be determined the address portion that is routed on the telecommunication link 31, and signaling interface 32 will use the route of request to be determined on the processor 322, so that checked according to the process of Figure 12 c.Device 100 is generally according to last Fig. 2 b and 3 operations, but except the part revised of the following Fig. 5 of reference.Download center 30 basically as top about Fig. 2 a the operation described, but except account the station and just they be recorded in the code data memory 323 to what separate there is no need physically to send code and identification data in the step 1006.

Referring to Fig. 5, except when the active program (as in Fig. 2 b) and in the past during the predetermined running time (as in Fig. 3) generate the billable events, in the present embodiment, in step 1402, when calling specific program function, subroutine or subroutine (for example spell check function in the word processor), reach and in step 1406, generating the data of the body of indicating this function in step 1404, just carry out beginning on a B during data of the subroutine of (step 1502), just carry out beginning the calling of subroutine of (step 1502) on a B.Also the device 100 of the operation of execution graph 2b and 3 is modified as the subroutine of invocation step 1502 in the present embodiment, rather than on

step

1104 and 1110, calls the subroutine of step 1202.

Processor 120 reads the newspaper code M on the scheduled unit that is stored on the permanent memory 150 in step 1502, and in step 1504 this number of increment and writing again in the permanent memory 150.

Newspaper code M is increment just when receiving effective return signal only preferably.

In step 1506, generate by encryption function number and newspaper code M and to use the request signal data division, encrypt and mix this data, thereby the ciphered data part does not have similarity with the data division that newspaper code M for the front generates.

In step 1508, carry out the check subroutine of beginning at step 1202 place of Fig. 2 b, use request message to send.

On the equipment of accounting 320, the process of execution graph 2c; In the present embodiment, deciphering is used after the request message data division in step 1304, judges just whether unique code is valid code, if whether order is immediately following after the last newspaper code that once receives to judge newspaper code M.If judge that just identity is effective.

Judge that also unique code is whether corresponding to the user of qualified utilization corresponding to the function of the function that is received number.In order to promote security, as among first embodiment, can carry out call line identification in the present embodiment, but this not basic yet.

When the use request message that received of checking is effective in step 1306, in step 1308, utilize the unique code that receives and newspaper code and with device 100 entitlement message that employed different ciphering process generation is returned in step 1506.In step 1206, utilize corresponding decryption process, if and at when deciphering this unique code and be stored in code matches in the program, processor 120 is just carried out from step 1210 to step 1510 returning of step 1408, and proceeds to the program function that execution is wanted.Use monitoring

When using a function in this way each time, the recording storage of identity that just will indicate user and function is in using monitoring memory 310.Preferably also store any further obtainable information of relative assembly 100.Periodically analyze and use the record that remains in the use monitoring memory 310 with one or more following manners:

1. determine the relative utilization rate of the difference in functionality of program.This can be used to develop to the further improvement of program or modification (and this use data type that can contrast the device 100 of this program of use is further analyzed);

2. the long-term pattern of the use amount that each user did of various functions that can creation facilities program (CFP).Available then it detect essence in user's the use pattern and change (mean time on the relative short time period on the order of magnitude in week) and survey such as a plurality of copies that use same program or with program jump and give different user's rogue behaviors such as (having different use patterns).

Thereby in the present embodiment, the program supplying merchant can account for its use, so the download center is unnecessary with the signal communication that accounts between the station that separates.Certainly, the central authorities of advancing telecommunications network by the function synthesized with download website 30 account in the station 200 rather than conversely, also may reach back one advantage.

Adopt the time dependent progression that uses request message can prevent the repeated use of rogue record and single use request message.

Moreover, even the record of the newspaper code on the permanent storage media is guaranteed to open time series again and is remained continuous in the device 100 after turning off device 100.In fact this prevented to utilize a plurality of rogue copies of program, because if two or more copies of service routine, the newspaper code that is stored at least one device 100 will be lower than the last newspaper code that the station 320 that accounts is received, and be manipulable thereby have only the portion copy of program.

Make the program development merchant can between a plurality of authors of program, pro rata distribute the royalty money to the use of difference in functionality charge, and the permission charging structure accurately reflect the cost of development of the different piece of program.Also might be to separate upgrading with additional charge downloaded software with its use.Moreover, make the program supplying merchant can determine the popularization of difference in functionality or subroutine.

Be not the charge that utilizes the user of billable events twin installation in next life, the user who installs in some situation can prepay the expense that (for example paying nonrecurring charge) and billable events can only be used for calculating the person that will pay the programming in advance.For example, when the long-distance user used the spell check module each time, the original author of spell check module can obtain certain fund.

In the present embodiment, the same with first embodiment, charge on the basis of time that can be in the past.In this case, can be different for different function rates of charge; Thereby when calling function, the time interval length of Δ T can be dependent on function setting.Like this, the station 320 that accounts can be the single usage charges volume of each billable events accumulative total, and for the different piece of program, billable events appears on the different speed.The 3rd embodiment

In the 3rd embodiment, change the system of first (or second) embodiment, thereby the mode with the use table remains on the history information of accounting in the device that accounts of each this machine of user, rather than concentrates and to remain on account station 200 or program supplying of telecommunications and discuss in the account equipment 320.

Referring to Fig. 6, in the present embodiment, device 100 is connected this machine by local[remote 11 and accounts on the equipment 400, and the central authorities that the latter is connected first embodiment by link 10 and network 20 account in station 200 and the download website 30.Preferably in the present embodiment, the use monitoring memory 320 of 200 second embodiment that communicate by letter of standing that accounts with central authorities is set.

Referring to Fig. 7, each equipment 400 comprises firm shell 401 and is provided with the fail-safe control system, and it just permanently makes this equipment failure detecting when attempting to alter, and has make it the tamperproof sealing that exposes when occurring altering.

The native interface circuit 411 that is connected on the local[remote 11 is arranged in shell 401 and be connected circuit side's interface circuit 410 on the telecommunication channel 10.What communicate by letter with interface 411,410 is the processor of operating according to the program stored that remains on ROM (read-only memory) 430 420 (for example microcontroller or microcomputer).Processor 420 connects on display board 460 (for example LCD), printer 426 and the keypad 470 of the demonstration that generates the data that account in the above, accepts the input instruction that control is presented at the data on the display 460 from keypad.Also be provided with this machine data-carrier store 440 that accounts in the present embodiment, it is suitable static RAM (SRAM) or EPROM.Download

Download in the present embodiment is similar to first embodiment, and therefore the difference between them only is described.Account equipment 400 of this machine is transparent for the transmission between device 100 and the network 20 usually, but processor 420 is configured to monitor all data communication on the both direction.When the download that detects program, processor 420 is just set up a program record for the program of downloading in account data storer 440.Confirm

In the present embodiment, be confirmed to be easily with first embodiment in carry out the samely.In the present embodiment, this machine equipment 400 that accounts is not participated in the affirmation process, and processor 420 is then only for using request and entitlement message that a transparent link is provided between interface 410 and 411.Account

In the present embodiment, the charge record is this machine rather than concentrates maintenance.Yet bill is to concentrate to generate.Thereby present embodiment is different with first embodiment to be the account processor 220 at station 200 of central authorities only is configured to simply to deal with flowing water total value to the program use, this total value of increment on each billable events for one of each user storage.

This machine account that station 400 processor 420 is configured to detect the appearance each time appearance of each billable events (and thereby) of authorization signal and when billable events is registered in said procedure and downloads in the data-carrier store 440 that accounts in the record for program foundation.Thereby, this machine transaction journal that equipment 400 is kept perfectly on this machine that accounts.The order that processor 420 is configured to accept from keypad 470 shows this daily record and relevant total expenses on display device 460, make the user of device 100 can monitor tariff level.Bill generates

With central authorities account station 200 be configured to regularly (for example January once or the first quarter once) for each installs the bill of the amount payable of 100 printing stored in it writes down.The station that in this case central authorities accounted is configured to account device 400 of all these machines is generated and makes its processor 420 print to installing 100 use with report form being stored in account the daily record in the storer 440 of this machine.

Operation to present embodiment can be made various modifications.For example, as in our above-cited early European application 943089904 (procurator's reference number A24829), the call record data of limited quantity can be kept at that central authorities account in the storer 240 on the station and account to stand to carry out between the record in 400 and check being kept at account station and this machine of central authorities.

As an alternative, account station 200 bill when generating signal receiving from central authorities, not to generate form at this machine, equipment 400 can send the transaction journal of accumulation to the central authorities station (yet this requires really by network 20 transmission lot of data) that accounts from its storer 400 that accounts but this machine accounts.

Because total volume of dealing with is a centralized stores in this embodiment, just deposit descriptive data at this organizational security, attempt to alter this machine equipment 400 that accounts and can not cause losing income usually, and only can cause the account possibility of the dispute between the operator at station 200 of the user of device and central authorities.

Yet, even so, can further encrypt them by processor 420 being configured to resend before the use message that receives on the interface 411 at interface 410, and the entitlement message that receives on interface pass to interface 411 before deciphering they and the security that improves present embodiment.

Correspondingly, central authorities are accounted station 200 is configured to carry out corresponding additional encryption and decryption stage.Thereby, cannot walk around this machine equipment 400 that accounts simply, because the signal that transmits along communication channel 10 comprises additional encryption stage for the signal that transmits along link-local 11.

Though with reference to being provided with account first embodiment at station of central authorities therein the foregoing description has been described, also can easily understand this machine account the station too can with carry out to confirm thereon to communicate by letter with the download center 30 that accounts, as in a second embodiment, rather than on the central authorities of first embodiment account station 200.

At last, not that the flowing water total value of dealing with each device use of 100 remains on central authorities and accounts in the storer 240 (or the storer that accounts on the download center of second embodiment), also might on this machine, store all pay imformations in the present embodiment.

In this case, processor 420 is configured to go up or when total expenses reaches predetermined level, send the data that account that comprise amount payable at least to central station (or download website), for generating bill in regular intervals of time (for example every month or per season).If do not keep the central record of remittance for the proceeds, then this machine accounts the physical security (intensity of geographic position and shell 401) of equipment 400 just have bigger importance.The 4th embodiment

In above-mentioned the 3rd embodiment, confirm with authorization stages by between device 100 and remote spots (central authorities account station 200 or download center 230), exchanging the coded signal execution via telecommunications network 20, as respectively among first and second embodiment, some or all charge data is stored in this machine station 400 simultaneously.

In the present embodiment, this machine is accounted equipment 400 is configured to carry out affirmation and authorization signal and (perhaps substituting in principle) keeps this machine charge record.

In the present embodiment, in order to prevent to attempt to cheat the program supplying merchant potentially, monitor the account continued operation of equipment 400 of this machine continuously by network 20 by altering this machine equipment 400 that accounts.

Referring to Fig. 8, in the present embodiment, substitute the central authorities station 200 that accounts with CSRC station 500, the former is configured to monitor the account correct work of equipment 400 of this machine.

Referring to Fig. 9, in the present embodiment, this machine accounts equipment 400 generally according to the operation of the 3rd embodiment shown in Fig. 7, but the additional code memory 435 (on the function corresponding to first embodiment code memory 230) that comprises.Download

In the present embodiment, with the same among first embodiment, download according to the process shown in Fig. 2 a usually.Yet, be not with the central authorities that unique code sends to first embodiment station 200 that accounts, but equally with program send it to this machine equipment 400 (being preferably in the initial transmission) that accounts.The existence of processor 420 identification unique codes.Account equipment 400 of this machine receives these unique codes and it is stored in the storer 435.The program of downloading is sent on the device 100, and unique code does not then transmit.Confirm

Affirmation process in the present embodiment with on regard to the described the same operation of first or second embodiment, but carry out from installing the validity check function of the 100 use request signals that receive with reference to the code that is stored in the code memory 435 with processor 420, and send it back the authorization signal that allows device 100 operations, to describe in more detail as following.Account

When authorization signal being turned back to device 100 at every turn, just billable events appears, and in storer 440, write down corresponding record, and as among the 3rd embodiment.

The account operational circumstances of unit 400 of this machine of regular monitoring.In more detail, referring to Figure 10 and 11, in step 1650, the use request signal that processor 420 checks receive from device 100 at interface 411.If receive the use request signal, processor 410 visits are the code of this procedure stores in storer 435 in step 1652, and check the validity of using request signal in step 1654.

If in step 1650, do not receive signal or if what receive is invalid signals (step 1654), processor 420 in step 1656, judge from once send pilot signal and whether pass by the preset time section to monitoring station 500.Time period Δ t can be on several minutes the order of magnitude; On any speed, it is enough short, accounts and stands 400 and avoid the operation of processor 420 to such an extent as to the duplicity user can not dismantle this machine in this period.

Pass by predetermined periods in this way, processor is the monitoring routine of execution graph 11b in step 1658 just.In step 1660, processor 420 is carried out self check and is judged whether it correctly works, and judges whether shell 401 is still closing.Evaluate self-detection result in step 1662, if self check indication operation defectiveness, then fault-signal is to monitoring station 500, and terminating operation with interface 410 transmissions (or attempting sending) in step 1664 for processor 420.

If self check indication non-fault, processor 420 generates the situation pilot signal and sends it to monitoring station 500 by interface 410 in step 1666.Best, this condition monitoring signal comprises the coded data of the unduplicated sequence that equipment 400 and 500 boths of situation Surveillance center know that accounts this machine of being selected from, and is identical with top described in a second embodiment mode.

Referring to Figure 11 c, in

step

1750 and 1752, CSRC station 500 judges whether received the situation pilot signal in preset time Δ t, and if not, the equipment records that just this this machine accounted is a fault.If received signal, then in step 1754 monitoring station 500 by decoding this signal and judge whether it follows the validity that predetermined sequence is determined this signal; If not, the equipment 400 that then as before this machine accounted is recorded as fault.If the signal that receives is effectively, just send back the answer (as mentioned above, according to the signal that is received) of encryption in step 1750.

Thereby as shown in Figure 10, account equipment 400 of this machine transmits and receives regular situation pilot signal y1-y5 and regular recall signal W1-E5.

Again referring to Figure 11 b, in step 1670, when receiving from recall signal that central monitoring station 500 sends, processor 420 is configured in step 1668 by decoding this recall signal and whether test it corresponding to the signal that is transmitted in step 1666, and judges whether recall signal is effective.If recall signal is incorrect, might someone attempt to alter circuit 10, network 20 or this machine equipment 400 that accounts.Correspondingly, processor 420 is carried out above-mentioned steps 1664.

When receiving effective recall signal, processor 420 just turns back among Figure 11 a on its starting point.

Referring to Figure 11 a, when receiving effective use request signal X1-X4 in step 1672, equally processor 420 is configured to the processor of execution graph 11b, if when receiving effective recall signal as mentioned above, processor 420 generates authorization signal W1-W4 with the same in first or second embodiment in step 1674, and it is sent back device 100 (step 1676).In step 1678, the billable events of correspondence is stored in the record storage 440 that accounts.

Thereby, in the present embodiment, carry out the affirmation process at 100 machines of device, some resembles in traditional dongle.

Yet, not that confirmation is remained in the hardware as user's assets, in the station, it can receive new security and confirmation by network 20 but this machine of assets that holds it in the telecommunications business entity of managing network 20 accounts.Thereby when downloading the upgrading of program or changing, can new unique code be offered this machine equipment 400 that accounts, thereby the duplicity user of the knowledge of the feasible unique code that may obtain the front can not utilize this renewal.Even do not transmitting when upgrading, the also code that the application configuration of downloading can be become will look for novelty termly, and 30 send this fresh code to this machine equipment 400 that accounts from the download center termly.

In addition, and quite different, with existing safety practice adopted the exchange of security information generate the incident of accounting (as in first and second embodiment) then local record they.

This machine equipment 400 that accounts is connected on the telecommunications network 20 and makes and give remote supervisory and control(ling) equipment 500 by regular self check and transmission signals, just can carry out, thereby reduction attempts to alter the account possibility of equipment of this machine the account remote monitoring of situation of equipment 400 of this machine.Attempting to alter link 10 cheats this machine equipment 400 that accounts and is defeated with providing from the returned packet of remote supervisory and control(ling) equipment 500.

As in the 3rd embodiment, the regular time interval (for example every month once or the first quarter once) on, this machine equipment 400 that accounts sends total money signal of dealing with of the payable amount of money of indication by circuit 10; In the present embodiment, this signal is (author of program) who suitably sends download website 30 to, so he can charge to the user.

If do not pay bill, download center 30 just signaling remote monitoring center 400 stops to communicate by letter with this this machine the further of equipment 400 that account, therefore stop to receive returned packet and stop to send authorization signal to device 100, the further use that prevents program is till having paid bill.

As in the 3rd embodiment, in the present embodiment, this machine equipment 400 that accounts is configured to request by input equipment 470, show the charge of total or it is printed to the user.

As in the 3rd embodiment, the total value that this machine equipment of accounting can just not dealt with transaction detail sends download website 30 to.

In alternative arrangements according to present embodiment, not to accumulate the information that accounts, but can on this machine accounts equipment 400, install the device (for example intelligent card reading) that is used to receive electronic cash, and can be on each billable events with the debit of account recording user payment devices (for example smart card).In this case, the equipment 400 that originally accounts utilizes telecommunications network 20 to carry out electronic cash notice (such as according to MONDEX (TM) payment system).

Can reach this opportunity to threshold value or on time basis (such as every month or per season) generate bill.The 5th embodiment

Among the embodiment in front, the program of operating means 100 is that configuration is used to generate the signal exchange corresponding to the billable events of the use of program.In the present embodiment, otherwise, this program is database access or out of Memory search program (particularly, such as World Wide Web (TM) or Mosaic online browsing programs such as (TM)), and charge is the information downloaded rather than the use of program is carried out.

In some cases, the paying price of retrieve data file is known in advance.In these situations, this device can be followed the process (it is the modification of the process of Fig. 5) of Fig. 7.

In Fig. 7, (step 1602), the just routine of the step 1502 of execution graph 5 when receiving the instruction of downloading predetermined data.In step 1604, the configuration of system can be according to Fig. 1 or Fig. 4.The equipment of accounting is followed the process of Fig. 2 c, installs 100 and then follows Fig. 2 b that revised by Fig. 7 and the process of Fig. 5 a.

The access data if the checking user has the right, and after generation accounted event signal, program was carried out data download in step 1606.

Usually, program in advance and do not know the price of using data to pay.In this case, application configuration is become the process of execution graph 8.The file title that comprise in this case, the indication of the body (as the World Wide Web page number) of indicating charge and data for the data downloaded that its use is charged.When program in step 1702 when telecommunication channel 10 data download, it is configured to read price and Data Identification field in step 1704, and in step 1706 the check subroutine of the step 1502 of calling graph 5.

In carrying out the check subroutine, processor 100 utilizes Data Identification and price field to generate and uses request signal, and the process of following Fig. 2 c, and the equipment disposition that will account becomes the exploitation value glucine to become billable events (as price being stored in the record that accounts).

After the incident that accounts, if authorized user is downloaded this data, device allows the user to watch or deal with data in step 1708.If not, device is just wiped data downloaded.The 6th embodiment

Operate according to the first, second, third or the 4th embodiment the total aspect of present embodiment, but except this program be to be implemented in the operating system of device 100 rather than in application program.Thereby, when operative installations 100 each time, just according to the duration charge of using.With this method, the rent of computer equipment can be imposed according to the actual usage level of device by the accounting system of telecommunications network.The 7th embodiment

In the present embodiment, according to using to charging as among above-mentioned the 6th embodiment such as

multiple devices

50,60,70 such as household electrical appliance.For example, 50 can be telephone set; 60 can be telerecorder; 70 can be printer; Deng.All these equipment are by LAN (Local Area Network) 80 interconnection (if each equipment 50-70 is equipped with suitable modulator-demodular unit, can be the feeder cable circuit).Master station 40 is connected on LAN80 and the telecommunication channel 10.Master station 40 can comprise this machine of the 3rd or the 4th embodiment that are applicable to monitoring multiple arrangement 50-70 station 400 that accounts.As an alternative, can only interconnect LAN80 and PSTN20.

Each equipment 50-70 comprises operation execution graph 2b and 3 and/or the microcontroller of program stored of 2b and 5 process.Thereby, in the present embodiment, can collect the expense of multiple household electrical appliance by communication channel rather than charging weekly or on every month the basis according to their usage level or according to the use of its specific function.

With in last embodiment, device can comprise such as public utilities table equipment such as main valve ammeters.In this case, this public utilities meter apparatus can comprise processor controls and telecommunication link.

More specifically, in the 7th embodiment, controlled device can comprise this public utilities table equipment, and independently this machine master station or the watch-dog of communicating by letter with telecommunication channel can be set.

Should understand the foregoing description is example of the present invention, and the function of various embodiment can be with in the various combination beyond describing clearly in the above.In addition, skilled reader will appreciate that and can make many corrections and replacement and do not break away from the present invention.Thereby, should think that any correction with substituting with all these all constitutes part of the present invention.All seek protection for any and combinations all novel themes as described herein.

Claims

1, a kind of method of paid operating means, this device is connected on the telecommunication channel, and this method comprises the steps:

From comprise communication facilities and under program stored control the watch-dog of the programmable processor of operation by described telecommunication channel the forward direction message is sent on the remote location;

By the returned packet of described telecommunication channel reception from described remote location;

Check described returned packet to judge whether it is real; If;

Allow described device operation; And, if not;

Forbid described device operation, this application configuration becomes the operation of this device of monitoring and carry out above-mentioned steps when using this device.

2, a kind of method that the operation of device is charged comprises the steps:

Receive the forward direction message from the watch-dog related with this device:

Check described forward direction message to judge that whether it is corresponding to predetermined described device; If;

Transmit returned packet and give described watch-dog; And

Generate the billable events relevant with the described use of described device.

3, according to the method for claim 2, wherein this device is connected on the telecommunication channel, and described forward direction and returned packet carry by this channel.

4,, wherein provide the predetermined increasing sequence of distinguishing described forward direction message according to the method for one of claim of front.

5, according to the method for one of claim of front, wherein said forward direction message comprises the coding of predetermined forward direction message data.

6, according to the method for one of claim of front, wherein said returned packet comprises the coding of predetermined returned packet data.

7, the method for the claim 6 when being subordinated to claim 4, wherein said predetermined data comprise described forward direction message data.

8, according to the method for claim 3, wherein said checking procedure comprises the step of discerning telecommunication channel, and the associated identity of the identity that will determine like this and the described device step of comparing.

9,, also comprise described charge is recorded in step in the stored record relevant with described device according to claim 2 or be subordinated in its claim 3 to 8 any one method.

10, according to the method for the claim 9 that is subordinated to claim 3, wherein said stored record is relevant with the associated telecommunication channel of described device.

11, according to the method for claim 9, wherein said stored record is to be stored on the place of the distribution related with this device.

12,, also comprise the step that generates debit's signal to the electronic cash device according to claim 2 or be subordinated in its claim 3 to 8 any one method.

13, according to the method for claim 12, wherein this electronic cash device is a debit card.

14, according to the method for claim 12 or 13, the step of forbidding the operation of described device when also being included in not corresponding payment with described debit's signal.

15, according to the method for one of claim of front, wherein this forward direction message is to generate on device predetermined time interval just in use.

16, a kind of method of paid operating means, this device is connected on the telecommunication channel, and this method comprises the steps:

Send the forward direction message to remote location from described device by described telecommunication channel;

By the returned packet of described telecommunication channel reception from the correspondence of described remote location;

Check described returned packet to judge whether it is true; If;

Allow described device operation; And, if not;

Forbid described device operation.

17, a kind of method that the operation of device is charged comprises the steps:

Reception is from the forward direction message of described device;

Transmit returned packet to described device; And